Overview
PolyAI is a Chrome extension that provides AI-powered BTC price predictions and trading tools for Polymarket. We are committed to protecting your privacy and being transparent about what data we collect and how we use it.

Data We Collect
When you create a PolyAI account, we collect:

Email address — used as your login identifier
Password — stored as a bcrypt hash (we never store or see your plaintext password)
IP address — logged at registration for rate limiting and abuse prevention
Data Stored Locally on Your Device
The extension stores the following in Chrome's local storage (never sent to our servers):

Session token (for staying logged in)
UI preferences (theme, widget visibility, chart settings)
Free tier usage counters
Data We Do NOT Collect
We do not collect your Polymarket wallet address
We do not collect your trading history or positions
We do not collect your browsing activity outside of Polymarket
We do not use cookies for tracking or advertising
We do not collect any personal information beyond your email
How We Use Your Data
Email — to authenticate your account and manage your subscription
IP address — to prevent abuse (rate limiting login attempts)
Usage data — to enforce free tier limits (tracked server-side by account ID, not personally identifiable)
Data Sharing
We do not sell, rent, or share your personal data with any third parties. Your data is used solely for operating the PolyAI service.

Data Security
Passwords are hashed using bcrypt with a cost factor of 12
Session tokens are signed with HMAC-SHA256 and expire after 7 days
Login attempts are rate-limited (5 per 15 minutes per IP)
The WebSocket server requires authentication before sending any data
All connections use SSL/TLS encryption
Data Retention
Your account data is retained as long as your account is active. You may request deletion of your account and all associated data by contacting us at polyai.info@gmail.com.

Third-Party Services
PolyAI connects to the following external services to provide its functionality:

Polymarket (polymarket.com) — the extension injects UI elements into the Polymarket trading page
Chainlink Data Streams (via Polymarket's WebSocket) — for real-time BTC price data used in charts
No user data is sent to these services by the extension.

Children's Privacy
PolyAI is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

Contact
If you have questions about this privacy policy or your data, contact us at polyai.info@gmail.com.